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WHAT IS CLAIMED IS : 



1. \A system comprising: 
a computer bus; 

a host processor connected to the computer bus, the host processor being 
programmed to perforin error code correction; 

a drive including msans for providing a block of ECC-encoded data; means 
for providing an encryption m&sk; means for performing a bitwise XOR of the 
encryption mask and the block o^CC-encoded data, a product of the bitwise 
XOR being an encrypted block, an ofcatout of the bitwise XOR means being 
coupled to the computer bus, whereby the encrypted block can be sent to the host 
processor via the computer bus for error cotie correction. 



ai 



2. The system of cliim 1 , wherein the i^ans for providing the 
encryption mask includes means for providing a seec^, a pseudorandom data 
generator for generating a sequence of random numbers from the seed, and an 
ECC encoder for generating ai encryption mask including first and second 
portions, the first portion including the random numbers, the second portion 
including redundancy data for the first portion. 



3. The system of c 
computer bus, for receiving thje 
for receiving the seed from th& 
generating a decryption mask 
bitwise XOR of the decryption 
product of the second bitwise 



4. The system of c 
coupled to an output of the 



aim 2, fprther\comprisjj^g means, coupled to the 
encrypted blocfTfrom the host processor; means 
drive; a second pseudorandom generator for 
Prom the seed; means for performing a second 
mask and user data in the encrypted block, a 
XOR providing unencrypted user data. 



aim 3, further comprising an MPEG decoder 
means for performing the second bitwise XOR. 
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5. The system of claim 4, wherein the drive is a DVD-ROM drive, and 
wherein a DVD decoder card includes the MPEG ^decoder, the means for 
receiving the encrypted block, the means for receiving the seed; the second 
pseudorandom generator and the means for cferforming the second bitwise XOR. 

6. The system of claim 1, wherein the ECC block includes a first 
portion for user data and a second portion for redundancy data, and wherein the 
encryption mask includes third and fourth portions corresponding to the first and 
second portions, respectively, of tne ECC blocks 



The system o^claim 6, whereinf the thjrd portion is filled with a 
plurality of numbers, and vvherein the fourth/ portio^ includes /^dundancy data 
generated from the third portion. 



8. The /ystem of claim 6, wherein the third portion is filled selectively 
with a plurality of numbers, and wherein the fourth portion includes redundancy 
data generated from the third portion. 

9. / The system of claim 1 , wherein the ECC block is coded according to 
an erro/code^orrection method, and wherein the encryption mask is coded 
acco/aing to the^same error code correction method. 



10. The system of claim 1 , wherein the drive further includes means for 
performing error code collection, and wherein the host processor also performs 
error code correction on the encrypted data sent by the drive. 
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11. A drive comprising: 

means for readingian ECC block from a storage medium; 
means for providing a seed; 

a pseudorandom djpta generator for generating a sequence of random 
numbers from the seed; 

means for generating an encryption mask including a sequence of random 
numbers and redundancy diata, the random numbers being generated from the 
seed; and 

means for performing a bitwise XOR of the encryption mask and the ECC 
block, a product of the bitwifee XOR being an encrypted ECC block. 



12. The drive of claim 1 1 , whereih the ECC block includes a first portion 
for user data and a second! portion for reaundanpv data, and wherein the 
encryption mask includes i third and fourth p^ion^GGfpetponding to the first and 
second portions, respectively, of the EuC block. 



13. The drive of claim 12, wherein the third portion is filled entirely with 
random numbers, and wherein the fourth portion includes redundancy data 
generated from the third portion. 



14. The drive/ of claim 12, wherein the third portion is filled selectively 
with random numbers and zeros, and wherein the fourth portion includes 
redundancy data generated from the third portion. 



15. The drive 
an error code correctio 



of claim 1 1 , wherein the ECC block is coded according to 
method, and wherein the encryption mask is coded 



according to the same error code correction method. 
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16. The drive of claim 11, further comprising means for performing error 
code correction on the ECC block. 



1 7. A method of transmitting secured data over a bus, the method 
comprising: 

receiving an ECO block; 
generating an encryption mask including a plurality of numbers and 
redundancy data; 

performing a bitwise XOR of the encryption mask and the ECC block, a 
product of the bitwise XOR being an encrypted ECC block; and 
sending the encrypted ECC block over the bus. 

1 8. The methoc of claim 1 7, fuptner cofjnprising the step of using the 
host processor to perform error code oorrectiron on the enofypted block. 



1 9. The methojd of claim 1 7, frurtbfer comprising the step of performing 
partial error-correction an the ECC blocVoefore performing the bitwise XOR and 
sending the encrypted tylock sent over the bus. 

20. The metHod of claim 17, wherein the ECC block includes a first 
portion for user data and a second portion for redundancy data, and wherein the 
step of generating the! encryption mask includes the steps of filling a first portion of 
the encryption mask entirely with random numbers, and filling a second portion of 
the encryption mask with redundancy data for the first portion, the first and second 
portions of the encryption mask corresponding to the first and second portions of 
the ECC block. 

21 . The method of claim 17, wherein the ECC block includes a first 
portion for user data and a second portion for redundancy data, and wherein the 
step of generating the encryption mask includes the steps of filling a first portion of 
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the encryption mask selectively with numbers and zeros, and filling a second 
portion of the encryption mask with redundancy data generated from the numbers, 
the first and second portions of the encryption mask corresponding to the first and 
second portions of the ECC Dlock. 

22. The method of claim 17, further comprising the step of decrypting 
the encrypted block, the step of decrypting including generating a decryption 
mask; and performing a bitwise XOR of the decryption mask and user data in the 



XOR providing unencrypted user 




encrypted ECC block, a product of the bitwj 
data. 



23. The method of claim 22, wherein the encryption mask is generated 
during encryption via a seed and a random number generator algorithm, and 
wherein the decryption mask is generated during- decryption by using the same 
seed and the same random r umber generator algorithm. 



24. The method of 
the encrypted block for subs 

25. The method of 



claim 17, further comprising the step of regenerating 
quent data transmission. 

claim 17, further comprising the step of reusing the 



random data block for encryption of subsequent data blocks. 
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